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CS| ' Abstract 

In this short paper, we propose a new multi-fractal flow model, aiming 
to provide a possible explanation for the crossover phenomena that appear 
in the estimation of Hurst exponent for network traffic. It is shown that 
crossover occurs if the network flow consists of several components with 
^ ' different Hurst components. Our results indicate that this model might 

be useful in network traffic modeling and simulation. 

, ^ ! 1 Introduction 

I The fractal properties of network traffic were extensively studied in many liter- 

■ atures during the last decade. It is widely believed that the dynamic behavior 
of network flow under re-scaling needs to be carefully considered in performance 

(<~^ ■ analysis and control. 

^\ I There are numerous explanations and models for the origins and appearances 

■ of fractality for network traffic; see e.g. p^-|llj and the references therein. Under 
the multi-fractality assumption for Internet traffic, we propose a new flow model 
to explain the crossover phenomena found in the estimation of Hurst exponent 
0, [H] (the crossover phenomenon is defined in the next section). Results 

^ . indicate that this model help gain more insights into the actual network traffic 

dynamics. Moreover, we can use this model to better simulate network traffic 
in a simple way. 

2 Self-Similarity and Multi-Fractality of Network 
Flow 

In data networks, the traffic flow is often viewed a certain self-similar stochastic 
process Yik), which by definition satisfies [l2]-p!3] 



Y{ak) = a"Y{k) (1) 
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where a > 0, and — denotes the equaHty of finite-dimensional distributions. 
H > is the so called Hurst exponent. 

A self-similar process with stationary increments can then be defined by 
multiplexing the increments X{k) — Y{k + 1) — Y{k) over non-overlapping 
blocks of size n as 

n-l 

X(")(fc) = ^X(A:n- j), fceZ (2) 
i=o 

The aggregated process X(")(fc) is called a stationary self-similar iJ-SSS 
process with Hurst exponent H. It has finite-dimensional distributions similar 
to X{k) 

X^"\k)^n"X{k), neN (3) 

There are various ways to study the stochastic properties of X^"^(fc). [TT] 
considers the cumulants of the aggregated series, which are defined as the Taylor 
coefficients of the cumulant-generating function 

g{t) = log (£;(e'^)) = ^ cum„,(X)— (4) 

m— 1 

with cum„, {X) = .g(™HO)- In [U, [H], it is shown that the 

^th Qj-jgj. cumulants 

of an aggregated H-sss process usually scales as 

cum,„ ^ n™-f^(™)cum„ {X{k)) (5) 

As pointed out in [TT] , Eq. (O implies that for each n, m e N the logarithm of 
the modulus of cum^ (A'("^(fc)) scales linearly with log(n) with slope mH{m) 
as 

log cum™ (^X'-"'^k)j ^ = mH{m) log(n) + c(m) (6) 

The simplest form of mH{'m) is a linear function of m, i.e. 

mH{m) = Am + B. (7) 

In [H], ^ is called linear-fractal model, where the coefficients A and B are 
directly estimated (interpolated) during the fittings to the cumulants. 

A special case of the linear- fractal model is the uni- fractal model 
which has the form 

mH{m) = TO + 2{H - 1) (8) 

where H is the corresponding Hurst exponent. 

[llj compared the linear-fractal model and the uni-fractal model using em- 
pirical network flow data. As shown in Fig. 3 and Fig. 4 of [TT], although both 
models catch the main trends of the real data in the estimation of Hurst expo- 
nent., neither of them can perfectly match the so-called crossover phenomenon. 
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Fig.l gives an illustration of the crossover phenomenon. In the current case 
the X-axis stands for log(rt) and the Y-axis stands for log cumulant. The slope 
of the fitting curve crossovers from a small value to a notably larger value. 
Therefore the curve consists of three parts: a line segment with a gentler slope 
when log(n) is small, the intermediate transition part, and another line segment 
with a steeper slope when log(n) is large. 
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Figure 1 : An illustration of the crossover phenomena of Hurst exponent which 
appears in the fractal model fitting to the cumulants and the logscale Diagram 
of wavelet based estimation. 

The crossover phenomenon can also be observed in the wavelet-based Hurst 
coefficient estimation for network flow [5], [16j . As shown in [5], a self-similar 
process has the following power law 

Var(y,) = C./^^+i) (9) 

where Cy is a constant, octave j — log2(scale), and Var{yj) is a specially defined 
measuring variance on octave j. Eq.® indicates that the logarithm of Var(yj) 
scales linearly with log(j) with slope (2H + 1) as 

log Var(2/, ) = {2H + 1) logO') + log Cy (10) 

However, real flow data again exhibits the unexpected crossover phenomenon 
as illustrated in Fig.l, (in this case the X-axis stands for log(j) and the Y-axis 
stands for log cumulant). An example can be found in Fig. 2. 3 of [5]. 

There are numerous physical models for the origin of the self-similarities in 
network traffic flows, but few of them can explain the crossover phenomenon. 
This gap calls for a finer model that accounts for the crossover phenomenon, as 
it will not only enhance our understanding of the underlying mechanism of the 
network traffic, but may also lead to improvements of network performance. 

3 A Mixed-Fractal Flow Model Yielding Crossover 
Phenomena 

Our previous study [17] shows that the PCA eigen-spectrum of the mixed fBm 
signals with different Hurst exponents may yield bi-scaling/multi-scaling be- 
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havior. Inspired by that finding, we propose a mixed-fractal flow model, which 
reproduces the above crossover phenomena and sheds light on its origin. 

We assume that the network flow process W{k) is the sum of two independent 
self-similar processes Xi{k) and X2{k) with different Hurst exponents Hi and 
H2, respectively: 

W{k)^XiXi{k) + XiX2{k) (11) 

It is assumed that Vai {Xi} — Va.i- {X2} — 1 and thus Ai , A2 > control 
the variance of the two components. Without loss of generality, we assume 
Hi < H2. 

Similarly to Eq. we can define Z("^(fc) by multiplexing the increments 
Z{k) = W{k + 1) — W{k) over non-overlapping blocks of size n G N as 



keZ 



(12) 



For the linear-fractal and uni-fratal models, we obtain by independence 

'z(")(fc)) 



cum,, 



XiX["\k)) 



(13) 



where ci(to) and C2{m) are partly determined by Ai and A2, respectively. In 
general, a larger A^ leads to a larger Ci(m). 

If ci{m) > €2(771), there is a unique positive solution n* (not necessarily an 
integer) for the following equation in variable n 



ci{m)n 



[m+2(_f/i-l)] 



C2(m)n['"+2(^^-i)l 



It is easy to find 



(z(")(fc) 



ci(rn)n[™+2(^i-i)l, for n< n* 
C2(TO)n["+2(^2-i)l, for n > n* 



(14) 



(15) 



th 

Therefore, for each m, the logscale diagram of the m -order cumulants of 
Z(")(fc) consist of three parts: one line segment with slope m + 2{Hi — 1) when 
n is small, the intermediate transition part (which is often short), and another 
line segments with slope m + 2(H2 — 1) when n is large. This is precisely the 
crossover phenomenon. An example from simulation is given in Fig. 2 below. 

Similarly, for the wavelet model, we obtain by independence 



Var(zj) = csj 



C4J 



(2H2 + I) 



(16) 



where C3 and C4 are partly determined by Ai and A2, respectively. In general, a 
larger Ai leads to a larger c^. 
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Figure 2: The crossover phenomena of Hurst exponent appears in the cumulant 
plot, where two self-similar processes with Hi = 0.5 and H2 = 0.7 are mixed 
with Ai = 2X2- 



If C3 > C4, there exists a unique positive solution j* (not necessarily an 
integer) for the following equation in variable j 

C3j(2^^ + l) = C4j(2^^ + 1) (17) 

It is easy to find 



^, , , / C3j(2^i+i), for J < J* 



lorj , 
C4i(2^^+i),forj»j* 

Therefore, the logscale diagram of Z{k) consist of three parts: one line 
segment with slope {2Hi + 1) when j is small, the intermediate transition part 
(which is often short), and another line segments with slope {2H2 + 1) when j 
is large. An example from simulation is given in Fig. 3. 

In sum, we have shown that if the traffic flow process consists of two inde- 
pendent additive components with different Hurst exponents, we may observe 
the crossover phenomenon in the estimation of the Hurst exponents using cu- 
mulants or wavelets. It is not hard to see that this conclusion can be extended 
to the case with more than two components. 



4 Concluding Remarks 

In this section, we would like to index the following points: 

First, it is interesting to find that the inconsistence of theoretical unique- 
fractal value of the Hurst exponent and the crossover phenomenon in real data 
may be resolved by a simple mixed-fractal model. Moreover, to simulate the 
mixed-fractal model, we can generate several processes with different Hurst ex- 
ponents, using any of the existing methods for generating uni-fractal self-similar 
series, and then add them up. This is in accordance with the conclusion in [19j 



5 



30 
25 
20 

10 
5 


5 10 15 

Octave j 

Figure 3: The crossover phenomena of Hurst exponent appears in the logscale 
Diagram of wavelet based estimation, where two self-similar processes with Hi = 
0.5 and H2 = 0.7 are mixed with Ai = 2A2. We apply the Matlab code from 
[T5] to obtain the logscale Diagram here. 

that we should multiplex multiple flow sources to generate more appropriate 
simulated traffic flows. 

Secondly, most of the previous physical models for the origins of self-similarities 
in network traffic can be adopted to account for the co-existence of multiple het- 
erogeneous self-similar components. For example, in the On/Off model [2^, if 
it is further assumed that there exist two different values of the exponent pa- 
rameters controlling the Pareto distributions of the ON-period/OFF-period of 
sources, then the aggregated flow will have two self-similar components with 
different Hurst exponents and thus exhibits crossover phenomenon. In general, 
in most complicated data networks, a channel is shared by many data sources 
(users) in an approximately independent and additive way. Due to the diver- 
sities of users and data transfer mechanisms, the inflow from different data 
sources might possess different Hurst components. This leads to the following 
conjecture: it is more likely to observe the crossover phenomenon in the traffic 
flows on backbone networks . 

Thirdly, using either the cumulant or the wavelet based Hurst coefficient 
estimation, we can estimate the approximate varying range of the Hurst expo- 
nents. This work is very helpful, because a more appropriate and more accurate 
physical model often allows for a potential qualitative improvements on network 
performance [12], [2T]-[22]. 
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